Page MenuHomeVyOS Platform

OpenConnect VRF support
Open, NormalPublicFEATURE REQUEST

Description

Some our customers ask to add VRF support in OpenConnect.

  1. Run OpenConnect server in specific VRF.
  2. Map OpenConnect interfaces to specific VRF.

I tested point 1. using

set vrf bind-to-all

it works. I could connect to the server and pass traffic, but only to default VRF. Because the created SSL interface was in default VRF.
Also I got errors like:

vyos ocserv[3655]: main[test]:192.168.139.1:45153 main.c:764: connect UDP socket from 192.168.139.1:62934: Network is unreachable

Details

Version
-
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Feature (new functionality)

Event Timeline

a.apostoliuk triaged this task as Normal priority.